System base operations 编辑

The following configurations enable you to perform system base operations on a Citrix ADC appliance.

How to view, save, and clear Citrix ADC configuration

Citrix ADC configurations are stored in the /nsconfig/ns.conf directory. For configurations to be available across sessions, you must save the configuration after every configuration change.

View running configuration by using the command interface

At the command prompt, type:

show ns runningConfig

View running configuration by using the GUI

1. Navigate to System > Diagnostics and, in the View Configuration group, click Running Configuration.

View the difference between the two configuration files by using the command interface

At the command prompt, type:

diff ns config <configfile> <configfile2>

View the difference between the two configuration files by using the GUI

1. Navigate to System > Diagnostics and, in the View Configuration group, click Configuration difference.

Save Citrix ADC configurations by using the command interface

At the command prompt, type:

save ns config

Save Citrix ADC configurations by using the GUI

1. On the Configuration tab, in the top-right corner, click the Save icon.

View saved configurations by using the command interface

At the command prompt, type:

show ns ns.conf

View saved configurations by using the GUI

Navigate to System > Diagnostics and, in the View Configuration group, click Saved Configuration.

Clear Citrix ADC configuration by using the command interface

You have the following three options for clearing the Citrix ADC configuration.

Basic level. Clearing your configuration at the basic level clears all settings except the following:

• Nsroot password
• Time Zone
• NTP server
• ADM server connect
• License fie information
• NSIP, MIP(s), and SNIP(s)
• Network settings (Default Gateway, VLAN, RHI, NTP, and DNS settings)
• HA node definitions
• Feature and mode settings
• Default administrator password (nsroot)

Extended level. Clearing your configuration at the extended level clears all settings except the following:

• NSIP, MIP(s), and SNIP(s)
• Network settings (Default Gateway, VLAN, RHI, NTP, and DNS settings)
• HA node definitions

Feature and mode settings revert to their default values.

Full level. Clearing your configuration at the full level returns all settings to their factory default values. However, the NSIP and default gateway are not changed, because changing them can cause the appliance to lose network connectivity.

At the command prompt, type:

clear ns config -force

Example: To forcefully clear the basic configurations on an appliance.

clear ns config -force basic

Clear Citrix ADC configuration by using the GUI

Navigate to System > Diagnostics and, in the Maintenance group, click Clear Configuration and select the configuration level to be cleared from the appliance.

How to restart or shut down appliance for unsaved Citrix ADC configurations

The Citrix ADC appliance can be remotely restarted or shut down from the available user interfaces. When you restart or shut down a standalone Citrix ADC appliance, the unsaved configurations (configurations performed since the last save ns config command was issued) are lost.

In a high availability setup, when the primary appliance is rebooted or shut down, the secondary appliance takes over and becomes the primary. The unsaved configurations from the old primary are available on the new primary appliance.

You can also restart the appliance by only rebooting the Citrix ADC software and not rebooting the underlying operating system. This is called a warm reboot. For example, when you add a new license or change the IP address, you can warm reboot the Citrix ADC appliance for these changes to take place.

Note:

You can perform warm reboot only on a standalone Citrix ADC appliance.

Restart the appliance by using the command interface

At the command prompt, type:

reboot [-warm]

Restart a Citrix ADC appliance by using the GUI

1. In the configuration page, click Reboot.
2. When prompted to reboot, select Save configuration to make sure that you do not lose any configurations.

Note:

You can perform a warm reboot by selecting Warm reboot.

Shut down an appliance by using the command interface

At the shell prompt, type:

• shutdown –p now: Shuts down the software and switches off the Citrix ADC. To restart Citrix ADC MPX, press the AC power switch. To Restart Citrix ADC VPX, restart the VPX instance.
• shutdown –h now: Shuts down the software and leaves the Citrix ADC switched on. Press any key to restart the Citrix ADC. This command does not switch off the Citrix ADC. Therefore, do not switch off the AC power or remove the AC power cables.

Note:

You cannot shut down an appliance through the Citrix ADC GUI.

How to synchronize system clock with servers on the network

You can configure your Citrix ADC appliance to synchronize its local clock with a Network Time Protocol (NTP) server. This ensures that its clock has the same date and time settings as the other servers on your network.

You can configure clock synchronization on your appliance by adding NTP server entries to the ntp.conf file from either the GUI or the command line interface, or by manually modifying the ntp.conf file and then starting the NTP daemon (NTPD). The clock synchronization configuration does not change if the appliance is restarted, upgraded, or downgraded. However, the configuration does not get propagated to the secondary Citrix ADC in a high availability setup.

Citrix ADC GUI allows you to configure the time zone and the NTP server IP address required for clock synchronization on the first-time-user (FTU) screen.

Note:

If you do not have a local NTP server, you can find a list of public, open access, NTP servers at the official NTP site, <http://www.ntp.org>, under Public Time Servers List. Before configuring your Citrix ADC to use a public NTP server, be sure to read the Rules of Engagement page (link included on all Public Time Servers pages).

In Citrix ADC release 11, the NTP version has been updated from 4.2.6p3 to 4.2.8p2.

Pre-requisite

To configure clock synchronization, you must configure the following entities:

1. NTP servers
2. NTP synchronization.

Add an NTP server by using the command interface

At the command prompt, type the following commands to add an NTP server and verify the configuration:

• add ntp server (<serverIP> | <serverName>) [-minpoll <positive_integer>] [-maxpoll <positive_integer>]
• show ntp server

Example:

add ntp server 10.102.29.30 -minpoll 6 -maxpoll 11

Add an NTP server by using the GUI

Navigate to System > NTP Servers, and create the NTP server.

Enable NTP synchronization by using the command interface

When you enable NTP synchronization, the Citrix ADC starts the NTP daemon and uses the NTP server entries in the ntp.conf file to synchronize its local time setting. If you do not want to synchronize the appliance time with the other servers in the network, you can disable NTP synchronization, which stops the NTP daemon (NTPD).

At the command prompt, type one of the following commands:

enable ntp sync

Enable NTP synchronization by using the GUI

Navigate to System > NTP Servers, click Action and select NTP Synchronization.

Configure clock synchronization to edit a ntp.conf file by using the GUI

1. Log on to the command line interface.
2. Switch to the shell prompt.
3. Copy the /etc/ntp.conf file to /nsconfig/ntp.conf, unless the /nsconfig directory already contains an ntp.conf file.
4. For each NTP server you want to add, you must add the following two lines to the /nsconfig/ntp.conf file:

server <IP address for NTP server> iburst

restrict <IP address for NTP server> mask <netmask> nomodify notrap nopeer noquery

> Note:
>
> For security reasons, there should be a corresponding restrict entry for each server entry.

Example

In the following example, an administrator has inserted # characters to “comment out” an existing NTP entry, and then added an entry:

`#server 1.2.3.4 iburst`

`#restrict 1.2.3.4 mask 55.255.255.255 nomodify notrap nopeer noquery`

`server 10.102.29.160 iburst`

`restrict 10.102.29.160 mask 255.255.255.255 nomodify notrap nopeer noquery`